Hot Topics

The Coming Storm

Don’t Let Zombie Zoom Links Drag You Down

Don’t Let Zombie Zoom Links Drag You Down

| | A Little Sunshine, Charan Akiri, Latest Warnings, linkedin, The Coming Storm, Zoom, Zoom Personal Meeting ID
Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. These company-specific Zoom ...
Krebs on Security
LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

LastPass: ‘Horse Gone Barn Bolted’ is Strong Password

| | A Little Sunshine, Data breaches, International Computer Science Institute, Karim Toubba, lastpass breach, Nicholas Weaver, The Coming Storm, Web Fraud 2.0, Wladimir Palant
The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest ...
Krebs on Security
FBI Hacker Dropped Stolen Airbus Data on 9/11

FBI Hacker Dropped Stolen Airbus Data on 9/11

| | A Little Sunshine, Airbus, BreachForums, Data breaches, FBI, Genesis Market, Hudson Rock, InfraGard, Microsoft, redline, The Coming Storm, USDoD
In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for all 80,000 ...
Krebs on Security
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

| | 1Password, A Little Sunshine, AdBlock Plus, Ars Technica, Chainalysis, Data breaches, Karim Toubba, lastpass breach, MetaMask, Nicholas Weaver, Nick Bax, Plex, Taylor Monahan, The Coming Storm, Unciphered, Web Fraud 2.0, Wladimir Palant
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a ...
Krebs on Security
Why is .US Being Used to Phish So Many of Us?

Why is .US Being Used to Phish So Many of Us?

| | A Little Sunshine, Coalition for Online Accountability, Dean Marks, GoDaddy, Interisle Consulting Group, National Telecommunications and Information Administration, The Coming Storm, U.S. Department of Commerce, Web Fraud 2.0
Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US is overseen ...
Krebs on Security
U.S. Hacks QakBot, Quietly Removes Botnet Infections

U.S. Hacks QakBot, Quietly Removes Botnet Infections

| | DOJ, Don Alway, FBI, Federal Bureau of Investigation, Latest Warnings, Martin Estrada, Qakbot, Qbot, Ransomware, The Coming Storm, U.S. Department of Justice
The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved ...
Krebs on Security
Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.

Tourists Give Themselves Away by Looking Up. So Do Most Network Intruders.

| | Assetnote, Canary Tokens, Cisco Talos, Haroon Meer, Hazel Burton, Ransomware, Security Tools, Shubham Shah, The Coming Storm, Thinkst
In large metropolitan areas, tourists are often easy to spot because they're far more inclined than locals to gaze upward at the surrounding skyscrapers. Security experts say this same tourist dynamic is ...
Krebs on Security
Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

Meet the Brains Behind the Malware-Friendly AI Chat Service ‘WormGPT’

| | A Little Sunshine, Arctic Stealer, Breadcrumbs, ChatGPT, Daniel Kelley, DCRat, Google Bard, Hackforums, large language models, LLMs, Rafael Morais, ruiunashackers, The Coming Storm, WormGPT
WormGPT, a private new chatbot service advertised as a way to use Artificial Intelligence (AI) to help write malicious software without all the pesky prohibitions on such activity enforced by ChatGPT and ...
Krebs on Security
How Malicious Android Apps Slip Into Disguise

How Malicious Android Apps Slip Into Disguise

| | A Little Sunshine, Aleksandr Eremin, Anatsa, android malware, Ars Technica, Google Play, The Coming Storm, ThreatFabric, Web Fraud 2.0
Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into benign mobile apps and evade security scanning tools. Google says ...
Krebs on Security
Russia Sends Cybersecurity CEO to Jail for 14 Years

Russia Sends Cybersecurity CEO to Jail for 14 Years

| | Evil Corp., Fancy Bear, Financial Times, Group-IB, GRU, Ilya Sachkov, Kaspersky Lab, Maksim Yakubets, Max Seddon, Ruslan Stoyanov, Sergei Mikhailov, The Coming Storm
The Russian government today handed down a treason conviction and 14-year prison sentence on Iyla Sachkov, the former founder and CEO of one of Russia's largest cybersecurity firms. Sachkov, 37, has been ...
Krebs on Security
Load more